Skip to content
My Own Suite

ONLYOFFICE

Replaces Google Docs / Microsoft 365

Office & documents High resources

ONLYOFFICE provides document, spreadsheet, and presentation editing that compatible MOS file apps can connect to for browser-based office workflows.

Install it from Suite Manager → Apps — once running it lives at onlyoffice.<your-domain> and on your Home dashboard.

What you can do

  • Browser office editing — Connect a compatible file app so documents, spreadsheets, and presentations open in the browser editor.
  • Independent service — Install and run the office editor separately from the file app that stores documents.

A self-hosted Google Docs alternative

ONLYOFFICE does the job people use Google Docs, Microsoft 365, Google Sheets, Microsoft Word, Google Slides, Microsoft Excel, Microsoft PowerPoint, Apple Pages, Apple Keynote, and Apple Numbers for, on a server you own: the same everyday task, without a subscription and without an account at a company that also keeps your data. If you arrived comparing one of these, this is the app My Own Suite installs in its place — its privacy posture below says exactly what it does and does not send anywhere.

  • Google Docs alternative
  • Microsoft 365 alternative
  • Google Sheets alternative
  • Microsoft Word alternative
  • Google Slides alternative
  • Microsoft Excel alternative
  • Microsoft PowerPoint alternative
  • Apple Pages alternative
  • Apple Keynote alternative
  • Apple Numbers alternative

Good to know

  • Resource needs: High resources — Document Server is heavier than small utility packages and may take several minutes to start cold.
  • Package-provided privacy notes (not independently verified by MOS): ONLYOFFICE Document Server runs on your own MOS server and edits documents the connected file app sends it. It needs no ONLYOFFICE account, processes documents inside the container, and MOS pins its optional StatsD metrics off. The trackers ONLYOFFICE is known for live in its desktop and mobile apps, which MOS does not ship.
    • MOS sets METRICS_ENABLED=false so the server's optional StatsD metrics stay off.
    • No ONLYOFFICE account or license server is contacted; the Community Edition enforces its limits locally.
    • Opening documents that reference external images or links, or enabling editor plugins or AI, can still make the server reach out to third-party sites.
Try before you commit

Just want to try ONLYOFFICE?

MOS is the way to grow a suite — apps installed, backed up, and updated together, all in one tailored dashboard. But if you'd rather see ONLYOFFICE on its own first, we've set up a one-click deploy on Railway so you can kick the tires with nothing to install.

Install in MOS

Recommended
  • Yours to control — runs on your own machine or any VPS you pick — and can move anytime
  • One dashboard — every app you run, in one place at your own domain
  • Backups built in — back up and restore your apps in a couple of clicks
  • Fully private if you want — on your own hardware, apps can stay off the public internet entirely
  • Updates handled — version-pinned, health-checked, applied for you
  • HTTPS and domains — trusted certificates without touching DNS records
  • Apps that connect — file, calendar, and office apps work together
Get started with MOS

Try it on Railway

Good for testing
  • Live in minutes — deploy from a template, fill in a few setup fields
  • The real thing, not a demo — the same app MOS installs, running for you
  • Free trial — limited free trial for new users
  • Railway account required — a third-party cloud with its own sign-up and usage billing
  • Tied to Railway — MOS runs anywhere and can migrate; this deploy lives on their platform

Good for a test drive, not the destination — this runs on Railway's cloud, not hardware you own, and comes without MOS backups, updates, or your own domain.

Deploy on Railway

Referral link — Railway pays MOS a commission on deploys made through this button, at no extra cost to you.

Privacy assessment

This is the assessment behind ONLYOFFICE's posture grade, exactly as it ships inside the package. It describes package version 0.2.3 and nothing else — install a different version and its own assessment travels with it. Reviewed 23 July 2026, due for reassessment by 23 January 2027.

What was reviewed

  • Package — version 0.2.3, content digest 5b9f359ecb25… at commit a7b99f9bb6df
  • ONLYOFFICE Document Server (Community Edition) — version 9.3.1 from docker.io/onlyoffice/documentserver pinned at 53a06109f1f4…

Deliberately outside this assessment:

  • The browser-based ONLYOFFICE editor JavaScript served to each user's browser
  • The ONLYOFFICE desktop and mobile client apps, which are distributed separately, are not shipped by this package, and are where ONLYOFFICE's known third-party trackers (for example the Google and Facebook trackers reported in the Android app) live
  • The connected document platform (for example Seafile) that stores files and sends them to ONLYOFFICE for editing
  • Optional ONLYOFFICE editor plugins or AI features that call third-party services when enabled by a user

Evidence

Configured Read from the configuration MOS actually ships.

  • The MOS package sets METRICS_ENABLED=false so the Document Server's optional StatsD metrics emitter stays off, enables JWT protection (JWT_ENABLED=true) with a generated provider-instance JWT_SECRET and a generated SECURE_LINK_SECRET, and projects no analytics, usage-reporting, or telemetry environment variables into the Document Server service.

    Source: apps/onlyoffice/manifest.json

  • The package sets ALLOW_META_IP_ADDRESS=false to block Document Server requests to cloud metadata addresses and ALLOW_PRIVATE_IP_ADDRESS=true so editing callbacks can reach the internal file-app service; both feed the Document Server's request-filtering allowlist that governs which URLs it will fetch.

    Source: apps/onlyoffice/manifest.json and apps/onlyoffice/README.md

Documented Taken from upstream documentation, policies or source.

Inferred Reasoned from the above rather than established directly.

  • The Document Server can still issue outbound requests driven by content and configuration - fetching external resources referenced inside documents and, where a user enables them, editor plugins or AI features that call third-party services - so external touchpoints exist but are content- or user-initiated rather than required for the packaged default.

    Source: ONLYOFFICE Docs documentation on request filtering and editor plugins, correlated with apps/onlyoffice/manifest.json

What this review does not settle

Published rather than smoothed over. Each of these is a limit of the method, not a finding against the app.

  • No runtime network capture was performed against the pinned 9.3.1 image; the no-backend-telemetry conclusion rests on the image's default configuration (empty license file, StatsD disabled and localhost-only, no documented analytics or update endpoint) plus the MOS METRICS_ENABLED=false pin, not on observed network silence.
  • Document content transits and is temporarily held by the Document Server during editing; the exact retention and cleanup of cached documents in the data volume was not independently verified for this version.
  • External resources referenced inside documents, and optional editor plugins or AI features, can cause outbound requests to third-party hosts on their own terms; the package constrains this only through the metadata-address block, so document- and user-driven network exposure remains operator-dependent.

Policies read

  • license — Ascensio System SIA (ONLYOFFICE) · retrieved 2026-07-23

How this review was produced

  • Method — AI-assisted review, not yet checked by a human
  • Model — Claude Opus 4.8 (Anthropic)
  • Workflow — assess-app-privacy at 6a741118713a
  • Repository commit — a7b99f9bb6df

Technical reference

Maintained alongside the package at apps/onlyoffice/README.md and rendered here as-is.

Environment variables

  • TZ: Container timezone.
  • ALLOW_PRIVATE_IP_ADDRESS: Allows document callbacks to private network addresses for self-hosted app integrations.
  • ALLOW_META_IP_ADDRESS: Keeps metadata-address callbacks disabled.
  • METRICS_ENABLED: Set to false so the Document Server’s optional StatsD metrics emitter stays off (upstream default is also false).
  • JWT_ENABLED: Enables JWT protection.
  • JWT_SECRET: Stable provider-instance JWT secret shared with connected document platforms through MOS integration grants.
  • SECURE_LINK_SECRET: Stable nginx secure-link secret for /cache/files/... URLs.

Volumes and persistence

  • data:/var/www/onlyoffice/Data: ONLYOFFICE document server data and runtime state.

Dependencies and integrations

  • Provides the document-editor capability using the ONLYOFFICE Docs API protocol.
  • Normal use requires a compatible document platform, such as Seafile, to create, open, and save files.

Customizations in this package

  • Startup wrapper normalizes selected environment values.
  • Synchronizes nginx secure_link_secret with SECURE_LINK_SECRET.
  • Prepares admin-panel supervisor log directories expected by current ONLYOFFICE images.